Enable password authentication in ssh if k-ot is enabled

2023-05-16 18:49:32 +02:00 · 2023-05-16 18:49:32 +02:00 · 1c60f462a1
parent 28ebefdf33
commit 1c60f462a1
1 changed files with 1 additions and 1 deletions
--- a/config/default.nix
+++ b/config/default.nix
@ -183,7 +183,7 @@
    openssh = {
      # Required for deployment and sops
      enable = true;
-      passwordAuthentication = false;
+      passwordAuthentication = lib.mkIf (!config.c3d2.k-ot.enable) false;
      permitRootLogin = "prohibit-password";
    };